The operating system used on the majority of Cisco's routers and switches; a package of routing, switching, internetworking and telecommunications functions tightly integrated with a multitasking operating system. For Apple's mobile device OS, use apple-ios.

learn more… | top users | synonyms

0
votes
0answers
169 views

Site-to-Site VPN not connecting with Cisco 877

I can't seem to get the VPN connection going with my 877. I have an old IOS (12.4) but it looks to me like all the pieces are there. I have compared this config against the Azure-provided (albeit ...
1
vote
1answer
1k views

Certificate 'not verified' when doing 802.x1 authentication on Apple ios

I've setup a new wifi network including a Freeradius server. Everything works fine except that Apple iOS gives a 'certificate not verified' warning when connecting. When the user accept the ...
10
votes
2answers
636 views

How to safely install a new IOS image on a Cisco device when the installed flash memory size isn't enough for two of them?

Today I was updating IOS on a Cisco 877 router, and a problem came up: the installed flash memory wasn't enough to hold both the old and the new IOS images, so the new one couldn't be uploaded unless ...
0
votes
0answers
261 views

Cisco 1841 - Acting as a PPPoE terminator?

We have 2x Fortigate 200B firewalls that we wish to operate in Active/Active HA mode - though, obviously, they cannot do this with PPPoE/DHCP enabled on the externally facing interfaces. To overcome ...
1
vote
1answer
67 views

What network/device info can be obtained from an iOS device connected to an 802.11u-enabled access point?

In order to perform some device security validations, I need canonical references to what device/hardware/network information can be obtained from an iOS device connected to an 802.11u-enabled access ...
3
votes
3answers
133 views

Show code for specific block in cisco IOS conf mode?

I work with Fortigate gear a lot and in the CLI it's possible to navigate to a node (say config system global then type in show and it will show me the configuration from that block. In IOS I can't ...
0
votes
1answer
89 views

Cisco switch restart doesn't reload config

Something really strange happened to me today. I was configuring a 3750 switch and halfway through the changes I messed up. So I did what I've always done, unplug the power cable from the switch and ...
0
votes
0answers
145 views

Cisco 1602: rewriting startup-config from terminal

How do I rewrite startup-config on a Cisco 1602 router without affecting the running-config? Outgoing connections from the router (scp, http) are not allowed. I'm not connected to the serial port, ...
1
vote
1answer
73 views

How can we better pinpoint instability issues on our network?

We have a medium-sized network of 600 users, all on Cisco switches. Where the users are allowed to plug in routers, etc. on the endpoints, so that they can use wireless and/or multiple devices in ...
0
votes
1answer
263 views

Cisco IOS, restrict IP addresses per ethernet port #

I am configuring a Cisco 881, and am interested in restricting individual ports on the LAN (FastEthernet 0-3). I would like to be able to limit the IP addresses that someone can use based on which ...
7
votes
2answers
1k views

Can the iPad remember the iTunes password when using Meraki MDM?

I'm currently using Cisco Meraki MDM to manage apps that get pushed out to company-owned iPads. In order for the company to retain ownership of the apps we purchase, apps are installed through the ...
1
vote
0answers
1k views

Cannot access L2L VPN from RA VPN connected client on Cisco ASA 5510

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 7.2 at our headquarters. The ASA also provides IPSec Remote Access ...
2
votes
1answer
169 views

cisco ios - syslog version

I am writing small article on Syslog and I was wondering, if there is any resource that tells me what version of Syslog is supported in what ios version? By Syslog version I mean rfc 3164/rfc ...
0
votes
0answers
764 views

Strongswan ipsec <--> iPhone, can't access LAN

I'm trying to connect to my LAN with iPhone, using Cisco IPsec VPN connection. I can connect to VPN, but I can't access any LAN devices. Hardware/Software: Strongswan 5.0.4, running on router - ...
5
votes
1answer
2k views

How do you NAT Hairpin in IOS 8.3+

As I asked here and duplicated here it appears NAT Hairpinning is the answer I'm looking for to allow internal servers to loopback through the ASA to access external IP's (without using DNS ...
1
vote
1answer
751 views

How to make a Cisco AP1142N speak Bonjour?

I have an autonomous Cisco access point (model AP1142N) and an Apple TV that are on the same physical and logical network. Bonjour does not work across the access point — both WiFi-to-WiFi and ...
2
votes
2answers
435 views

How does Arista EOS and Cisco IOS encrypt tacacs+ encyption keys?

We're using tacacs for AAA on our network devices, and I'm interested/curious in how our devices are encrypting the passwords device side. Following the Arista EOS manual, page 139, I'm running: ...
1
vote
0answers
213 views

How do get multicast to work on a Cisco AP1240?

I have a Cisco AP1142N in standalone mode acting as a simple AP. On the wired segment of the LAN, there is an Apple TV that is used to mirror laptop screens to a large TV screen. As long as clients ...
-1
votes
1answer
137 views

iPad<->Device Ad-Hoc network failures using Auto IP addresses [closed]

We are using the iPad to make an ad-hoc wireless connection to our proprietary device. DHCP is not available, so we are using addresses in the Auto-IP range. The user selects the device from the list ...
5
votes
1answer
530 views

Tag/Untag VLANs from Port Perspective on HP Switch

I'm familiar with vlans and tagging, and we usually use the command line interface for our HP Layer 3 switches. I've done quite a few: vlan 10 untagged 21 I've always wondered if this was possible ...
0
votes
2answers
329 views

Is there an issue with Exchange 2010 Active Sync and iOS 6.1.x?

We are doing a complete server and infrastructure update with a Migration from Exchange 2007 to 2010. Along with the server upgrade we're doing a migration from an old antiquated 192.0.2.x internal ...
0
votes
1answer
162 views

Route maps on dual homed Cisco router

I have a Cisco 1801 on a remote site with dual WAN connections, with route maps to correctly NAT depending on which interface the traffic leaves via. I use IP SLA to adjust the default route from the ...
-1
votes
1answer
256 views

Can 'show mac address-table' be used inside user mode? [closed]

I've been studying for my CCNA exams using Cisco ICND1 Official Cert Guide, Wendell Odom. On one question they ask in which modes show mac address-table can be executed. The answer is User mode and ...
-1
votes
1answer
447 views

Plesk cron iOS notifications randomly stopped working [closed]

Recently, I started getting these cron error from Plesk. This cron controls push notifications to Plesk Manager on my iPhone/iPad. Obviously, turning off the cron stops the error but I want the cron ...
1
vote
2answers
1k views

Having two IP Routes/Gateways of last Resort on an HP Switch

We have an HP Layer 3 Switch that is doing IP routing between vlans. The general set up is that the switch has an IP address on each VLAN and IP routing is enabled. On our servers VLAN, we have a ...
0
votes
1answer
295 views

Is it possible to configure a Cisco router to serve as a Teredo relay?

The router in question is a Cisco 871, show version as follows: Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(24)T8, RELEASE SOFTWARE (fc1) Technical Support: ...
0
votes
3answers
2k views

Cisco 881 throughput/bandwidth issue

We have a dedicated 30Mb connection (up/down) from our ISP, but we can only seem to get 10Mb (up/down) from the router. Does anyone know what we're missing, or how we can tweak the settings on this ...
0
votes
1answer
878 views

Cisco IOS Router and Azure VPN - tunnel established, but traffic is not flowing

I am trying to connect a Cisco IOS router to Azure via the IPSec VPN. I have used the Cisco ISR template to establish a tunnel from my router to Azure. In the Azure control panel, I can see that the ...
1
vote
2answers
193 views

Cisco IOS Setting up a password/secret

I'm figuring out the basics to CISCO Ios commands and I am struggling to find out the answer to the following question: What would provide a better protection when you set up a password to allow ...
1
vote
1answer
203 views

iPhone loads Wi-Fi captive portal page over 3G (iOS 6)

I've made a captive portal using iptables NAT redirection and white-listed MACs. This works nicely, and iDevices pop up my login/terms page after association. However, I've noticed that when 3G is ...
0
votes
1answer
23 views

Temporarily reduce Cisco trust level

I'm a new network admin and I'm looking through the various config files we have in our routers/switches/asa. I'm wondering if there is a way to lower trust level that my login has from 15 to ...
0
votes
2answers
64 views

Cisco Archiving of Logs - Rebooting device resets file count but doesn't remove files

We are using the cisco IOS feature of configuration archiving and it has been very useful. One thing we are finding is that we have set the maximum file count to 14, which is fine. Except when we ...
0
votes
1answer
569 views

Cisco ASA 5520 is missing management interface

The ASA 5520 show version shows the following Cisco Adaptive Security Appliance Software Version 8.4(2) System image file is "Unknown, monitor mode tftp booted image" Config file at boot was ...
-1
votes
1answer
200 views

Is it possible to log Active Directory users internet activity on a Cisco Firewall-IOS router?

We are looking at replacing our Forefront TMG server with a combination Cisco ISE VMware instance and hopefully an Active Directory integration with our edge router. We need to log all authenticated ...
0
votes
3answers
699 views

c1841 unable to recognize HWIC-1T (smart serial) card. any idea?

I have this problem where c1841 router unable to verify HWIC-1T card (with smart serial connector), you have to know that i have other routers with IOS c1841-ipbasek9-mz.151-4.M5 and ...
0
votes
1answer
1k views

IOS Port Forwarding and NAT involving a VPN

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters. The network looks something like this: ...
0
votes
3answers
299 views

IOS Nated port forwarding

I have cisco ios router with ios C1900 Software (C1900-UNIVERSALK9-M), Version 15.2(4)M1. And I have setup Nat with port overload (one public IP). And there is a static mapping: ip nat source static ...
3
votes
1answer
1k views

Dual Cisco Router Stateful Firewall

At my company we have a single Cisco 3925sec/k9 router running BGP with 2 ISPs. Now we want to purchase a redundant router of the same model to eliminate a single point of failure. I can set up BGP ...
0
votes
1answer
120 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
0
votes
1answer
281 views

Cisco ACL Block by Packet Length

I am presently blocking a small scale DDOS attack using IP addresses but all the packets are the same size, 1514 bits and I kind of don't want to fill up an ACL rule with a bunch of IPs. After reading ...
0
votes
1answer
1k views

Cisco - Port's configured trust state is now operational

I am looking at a Cisco switch's log at work and am a bit confused by how verbose it can be at times. For instance, we use automatic QoS here and I often see this when phones are plugged: Mar 18 ...
0
votes
1answer
544 views

What are Serial network interfaces?

I am reading through documentation which talks about "Serial network interface" something which also shows up when IOS boots. I never see "Serial network interface" defined anywhere. If my router ...
1
vote
0answers
212 views

Tool to parse Dell PowerConnect switch configs to make them more readable and diff friendly

I've been working with many Dell PowerConnect switch configurations over the years, and even though their configuration console is quite IOS like, it doesn't manage configuration statements the same ...
0
votes
1answer
4k views

Can you ping a Cisco Router's Loopback Interface from a PC using PacketTracer

I may be misunderstanding what you can do with a Router's loopback interface. I am trying to ping it from a PC on the same network. I am using Packet Tracer to simulate this, a Cisco 1841 and a PC ...
8
votes
4answers
199 views

Prevent end-users from purchasing apps on iOS

We are looking to deploy iPads from inside our organization. We want to be able to install apps for users, which can be done via Mobile Device Management. However, we do not want users to be able to ...
1
vote
2answers
1k views

strongSwan without password on iOS [closed]

I have the following problem: I need to authenticate on VPN with iOS without password, but with certificate only. The reason is I need "VPN on demand", which is active on certificate authentication ...
0
votes
1answer
207 views

EasyVPN vs Site to Site VPN bandwidth use

We have recently switched from site-to-site VPNs to EasyVPNs. At around the same time, we noticed increased bandwidth use. Does anyone know whether these two VPN methods use noticeably different ...
0
votes
1answer
63 views

dot3StatsDuplexStatus not firing from Cisco Switch

Anyone have any luck with this Trap dot3StatsDuplexStatus OID = 1.3.6.1.2.1.10.7.2.1.19 I am able to test the OID by doing an SNMP walk which shows the correct information, however no Traps are ever ...
1
vote
1answer
199 views

Cisco IOS: How is it possible to break with default config register of 0x2102

The default config register of an IOS device is 0x2102. The table here clearly states that 0x0100 signifies "Ignore Break," and that the default config register employs these options: Ignores break ...
0
votes
1answer
1k views

How to whitelist external access to an internal webserver via Cisco ACLs?

This is our company's internet gateway router. This is what I want to accomplish on our Cisco 2691 router: All employees need to be able to have unrestricted access to the internet (I've blocked ...